Does bombshe.com use cookies?

bombshe.com uses 3 cookies. No consent management platform was detected.

Does bombshe.com use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on bombshe.com. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does bombshe.com use?

bombshe.com loads 10 third-party requests from 7 vendors, including Cloudflare, Microsoft, Shopify, Shopify Inc., Google LLC.

How many marketing and analytics cookies does bombshe.com set?

bombshe.com sets 0 marketing and 0 analytics cookies, alongside 0 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

bombshe.com

Item: bombshe.com
Rating: 44
Author: Passiro

https://bombshe.com

Last scanned August 15, 2026

A cookie scan of bombshe.com conducted on August 15, 2026 found 3 cookies and 10 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 10 third-party requests from 7 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

! Needs attention

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✓

Cookies

3 cookies detected: 0 necessary, 0 analytics, 0 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
cart_currency before consent	bombshe.com	Functional	E-commerce	14 d	–	–	1st
localization before consent	bombshe.com	Functional	Shopify	365 d	–	–	1st
_shopify_essential before consent	bombshe.com	Functional	Shopify	365 d	✓	✓	1st

Browser storage set by the site

Name	Domain	Party
consentHeader set by bombshe.com/storefront-banner.js:1:5809	https://bombshe.com	1st	before consent
_shs_state set by bombshe.com/shopify-perf-kit-3.8.3.min.js:1:35548	https://bombshe.com	1st	before consent
ADNABU_REDIRECT_MANAGER_SESSION_ID set by bombshe.com/:649:30	https://bombshe.com	1st	before consent
shopify:webmcp_adapter_loaded set by bombshe.com/:445:256	https://bombshe.com	1st	before consent
theme:recently-viewed-products set by bombshe.com/lniana-luzna-koszula-biala-1:6791:18	https://bombshe.com	1st	before consent
st-wishlist-guest-stats-hydrated set by cdn.shopify.com/st-wishlist.js:80:126704	https://bombshe.com	1st	before consent

Third-Party Trackers

10 requests detected from 7 vendors: Cloudflare, Microsoft, Shopify, Shopify Inc., Google LLC...

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Cloudflare before consent Cloudflare tracker domain (source: Disconnect.me, category: Content)	Analytics	script	www.cloudflare.com
Microsoft before consent Microsoft tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	www.clarity.ms
Shopify before consent Shopify tracker domain (source: Disconnect.me, category: Content)	Analytics	script	otlp-http-production.shopifysvc.com
Shopify Inc. before consent Shopify analytics	Analytics	pixel	monorail-edge.shopifysvc.com
Google LLC Google tracker domain (source: Disconnect.me, category: Content)	Necessary	script	ajax.googleapis.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
Meta Platforms, Inc. Meta tracker domain (source: Disconnect.me, category: Content)	Necessary	script	scontent.cdninstagram.com
Shopify Inc. Shopify platform	Necessary	script	cdn.shopify.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net